Carrie Roberts
1bfefdacfc
* provide elevation_required attribute * provide elevation_required attribute * provide elevation_required attribute
30 lines
709 B
YAML
30 lines
709 B
YAML
---
|
|
attack_technique: T1115
|
|
display_name: Clipboard Data
|
|
attack_link: https://attack.mitre.org/wiki/Technique/T1115
|
|
|
|
atomic_tests:
|
|
- name: Utilize Clipboard to store or execute commands from
|
|
description: |
|
|
Add data to clipboard to copy off or execute commands from.
|
|
supported_platforms:
|
|
- windows
|
|
executor:
|
|
name: command_prompt
|
|
elevation_required: false
|
|
command: |
|
|
dir | clip
|
|
clip < readme.txt
|
|
|
|
- name: PowerShell
|
|
description: |
|
|
Utilize PowerShell to echo a command to clipboard and execute it
|
|
supported_platforms:
|
|
- windows
|
|
executor:
|
|
name: powershell
|
|
elevation_required: false
|
|
command: |
|
|
echo Get-Process | clip
|
|
Get-Clipboard | iex
|